Lead Identity & Security Engineer

Who you are

• OAuth 2.0 and OpenID Connect, including practical implementation and troubleshooting
• JSON Web Tokens (JWT) and token-based authentication and authorisation
• Identity Providers (IdPs) and enterprise identity and access management solutions
• Java and development of secure, production-grade backend services
• Git-based software delivery, including modern CI/CD practices
• Kubernetes and containerised application environments
• AWS and cloud-based security and infrastructure
• Designing and implementing secure APIs, integrations and distributed systems
• Security principles including authentication, authorisation, token lifecycle management, secrets management and least-privilege access

What the job involves

• We are looking for a Lead Identity & Security Engineer to take a leading role in the design, development and operation of the services that underpin authentication and authorisation across the Accounts platform
• You will provide technical leadership across identity and security engineering, helping to build resilient, secure and scalable identity capabilities aligned with industry standards and best practice
• You will work closely with engineering, architecture and security teams to ensure identity is embedded effectively across applications and integrations
• Lead the design, development and operation of identity and access management capabilities across the Accounts platform
• Provide technical leadership for token-based authentication and authorisation services, including JWT token services
• Design and implement secure identity solutions using established industry standards and protocols
• Lead the development of secure application and integration patterns, ensuring authentication and authorisation requirements are considered from design through to implementation
• Establish and promote engineering standards, patterns and best practices for identity and security
• Provide technical guidance and mentoring to other engineers across identity and security
• Work collaboratively with architecture, platform, application engineering and security teams to solve complex identity challenges
• Contribute to the reliability, scalability, observability and operational maturity of identity services
• Produce, maintain and review technical documentation, architecture decisions, standards and security guidance
• Identify and address security risks and continuously improve the security posture of the platform